Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/ZZHNN6VnNl8xdA75bFFiL_OxOGo.roa
File:                     ZZHNN6VnNl8xdA75bFFiL_OxOGo.roa (raw, json)
Hash identifier:          Zp0VSHKUDJ/eBRLxe15Vo3aBcQ6gDLhEbUxyJfIlslg=
Subject key identifier:   65:91:CD:37:A5:67:36:5F:31:74:0E:F9:6C:51:62:2F:F3:B1:38:6A
Certificate issuer:       /CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
Certificate serial:       0193AAEC717E40279B08D57E3F7E54190CA5
Authority key identifier: 29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/ZZHNN6VnNl8xdA75bFFiL_OxOGo.roa
Signing time:             Mon 09 Dec 2024 10:17:22 +0000
ROA not before:           Mon 09 Dec 2024 10:17:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     58238
IP address blocks:        194.33.48.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:aa:ec:71:7e:40:27:9b:08:d5:7e:3f:7e:54:19:0c:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=290bcc50a9a33ba5651efd1afe40b6fdb02556f0
        Validity
            Not Before: Dec  9 10:17:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6591cd37a567365f31740ef96c51622ff3b1386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:a6:c4:d8:6b:aa:d9:be:11:d5:7d:9f:dd:
                    74:5a:08:15:be:d8:ec:8e:c2:dd:bc:fe:f9:dc:1c:
                    9f:22:43:52:0e:d8:98:bc:1c:d9:0f:5a:ba:c3:e5:
                    bd:32:65:bf:4d:71:38:de:8b:57:29:8d:29:4f:20:
                    6d:78:c7:35:c9:50:99:fa:fd:32:a0:74:e4:5e:bf:
                    26:c8:eb:4f:3e:15:ae:ee:dc:c3:bc:9f:37:0a:6b:
                    04:07:81:89:55:ac:13:79:97:07:2f:26:fc:1e:3f:
                    da:f2:45:f9:09:bb:5f:95:a6:21:79:59:bd:26:f1:
                    db:11:1e:a0:d4:cd:90:0a:bf:27:50:35:ed:e6:5f:
                    70:72:df:e6:e0:6d:d9:46:be:22:fe:81:34:c1:7c:
                    88:26:3d:06:92:79:f8:18:b3:d5:8c:97:96:16:33:
                    7d:b8:e3:d9:b4:c4:5b:40:20:2a:3a:60:7d:de:e5:
                    37:7f:e6:48:d3:74:41:4a:6e:1a:74:5c:fb:0d:5d:
                    f5:25:79:64:86:81:16:7c:8a:fa:48:16:ff:14:19:
                    93:e2:e7:a3:ae:dd:6b:07:fe:53:df:e0:05:4d:ad:
                    1c:a0:ce:6e:2a:63:e5:7a:4c:12:ec:1d:b2:61:23:
                    63:30:2c:9d:17:aa:08:5b:fe:d2:1a:0d:38:33:f9:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:CD:37:A5:67:36:5F:31:74:0E:F9:6C:51:62:2F:F3:B1:38:6A
            X509v3 Authority Key Identifier:
                keyid:29:0B:CC:50:A9:A3:3B:A5:65:1E:FD:1A:FE:40:B6:FD:B0:25:56:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQvMUKmjO6VlHv0a_kC2_bAlVvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/ZZHNN6VnNl8xdA75bFFiL_OxOGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/4b6ef4-38ee-4c06-8cb6-76982493ea1a/1/KQvMUKmjO6VlHv0a_kC2_bAlVvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:56:ae:20:b7:fa:7a:6d:fe:a4:f3:f5:a3:8a:0f:ee:a4:20:
         b8:8d:9c:40:0b:0b:b7:87:2b:f3:d8:73:50:a3:ff:21:df:cf:
         99:8b:5e:45:42:74:3f:da:cb:98:4c:b6:47:94:61:df:30:4f:
         51:7c:ee:07:bc:c1:be:56:8d:7b:52:60:9e:9b:79:b6:c5:c4:
         2c:9a:a1:a0:e0:ef:6a:58:a2:7a:5a:17:f4:5e:d6:54:03:5f:
         fb:2f:b3:73:23:cb:21:be:8e:df:d0:21:19:da:9d:34:1a:9b:
         90:cb:2e:ac:a2:55:36:ae:53:99:3e:29:53:19:fb:97:6a:25:
         7f:05:09:ce:ed:db:6c:06:09:e8:e1:cd:b1:f5:e0:cc:53:1d:
         6c:40:9b:d4:db:2d:84:78:c7:0c:8b:4a:5d:e0:18:69:9f:fb:
         90:7b:dc:7b:96:75:80:44:6d:1f:4b:43:e0:b2:ca:b2:f0:ac:
         d8:6a:2b:87:b3:23:48:87:46:4d:2b:d6:15:32:14:e0:b1:20:
         5e:d8:56:22:f9:1e:e5:94:3d:93:6e:b9:9e:85:9a:4a:b4:cf:
         e0:d8:ae:7d:7e:c3:e8:37:e9:83:1f:83:d8:c5:df:70:60:fd:
         91:d3:e3:98:74:5a:f3:18:03:2d:0b:e2:76:d0:a6:38:49:d9:
         d6:b7:f0:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZOq7HF+QCebCNV+P35UGQylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MGJjYzUwYTlhMzNiYTU2NTFlZmQxYWZlNDBiNmZkYjAy
NTU2ZjAwHhcNMjQxMjA5MTAxNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTkxY2QzN2E1NjczNjVmMzE3NDBlZjk2YzUxNjIyZmYzYjEzODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUimxNhrqtm+EdV9n910WggVvtjs
jsLdvP753ByfIkNSDtiYvBzZD1q6w+W9MmW/TXE43otXKY0pTyBteMc1yVCZ+v0y
oHTkXr8myOtPPhWu7tzDvJ83CmsEB4GJVawTeZcHLyb8Hj/a8kX5CbtflaYheVm9
JvHbER6g1M2QCr8nUDXt5l9wct/m4G3ZRr4i/oE0wXyIJj0Gknn4GLPVjJeWFjN9
uOPZtMRbQCAqOmB93uU3f+ZI03RBSm4adFz7DV31JXlkhoEWfIr6SBb/FBmT4uej
rt1rB/5T3+AFTa0coM5uKmPlekwS7B2yYSNjMCydF6oIW/7SGg04M/kr7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGWRzTelZzZfMXQO+WxRYi/zsThqMB8GA1UdIwQY
MBaAFCkLzFCpozulZR79Gv5Atv2wJVbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYt
NzY5ODI0OTNlYTFhLzEvWlpITk42Vm5ObDh4ZEE3NWJGRmlMX094T0dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi80YjZlZjQtMzhlZS00YzA2LThjYjYtNzY5ODI0OTNlYTFh
LzEvS1F2TVVLbWpPNlZsSHYwYV9rQzJfYkFsVnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwiEwMA0G
CSqGSIb3DQEBCwUAA4IBAQBRVq4gt/p6bf6k8/Wjig/upCC4jZxACwu3hyvz2HNQ
o/8h38+Zi15FQnQ/2suYTLZHlGHfME9RfO4HvMG+Vo17UmCem3m2xcQsmqGg4O9q
WKJ6Whf0XtZUA1/7L7NzI8shvo7f0CEZ2p00GpuQyy6solU2rlOZPilTGfuXaiV/
BQnO7dtsBgno4c2x9eDMUx1sQJvU2y2EeMcMi0pd4Bhpn/uQe9x7lnWARG0fS0Pg
ssqy8KzYaiuHsyNIh0ZNK9YVMhTgsSBe2FYi+R7llD2TbrmehZpKtM/g2K59fsPo
N+mDH4PYxd9wYP2R0+OYdFrzGAMtC+J20KY4SdnWt/CG
-----END CERTIFICATE-----